bcd7a8dde453ee6f87d36acd124b4e5a | Triage

Sharing

General

Target

bcd7a8dde453ee6f87d36acd124b4e5a
Size

63KB
MD5

bcd7a8dde453ee6f87d36acd124b4e5a
SHA1

c49e437363f5d0e59d12027f45b1c5d924b967b5
SHA256

4ed1f076a8e71a78e1cb8501b92b4e846e883c1da97aa5ba1b2f72c258495d36
SHA512

3e8ae55cc15d9c0cf91877b14b3b2192f1b323a5f0bd88e1cae3a8532558c3b02e196ab270c152be19a10bf3fa99ccd3f24d61e40d1219812f7f5a9cbf666384
SSDEEP

1536:e/pMAPAL6OV0Nb9bGxo0oC08C1KUXU6tBr9LcxDhqxS4w:e/6l4wd0IGr5Vw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcd7a8dde453ee6f87d36acd124b4e5a

Files

bcd7a8dde453ee6f87d36acd124b4e5a
.exe windows:4 windows x86 arch:x86

0aadce95b9a96b67dee417469d0c1e33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ValidateLocale
GlobalMemoryStatus
FoldStringA
CallNamedPipeA
ReleaseActCtx
MultiByteToWideChar
CancelIo
Thread32Next
GetComputerNameW
FindFirstVolumeW
BaseInitAppcompatCache
GetPriorityClass

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE